This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json) Hash identifier: rd20eyNBEdorz2FIiyl/CsylozBVxCev6497zlmoGTA= Subject key identifier: 98:D7:0E:3E:DB:7B:7C:C2:D4:D3:1B:CD:9A:DB:F8:7E:A2:5E:C5:91 Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Certificate serial: 55F0D723F79A081E0BC22D0B15B59483245B921D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft Manifest number: 052B Signing time: Tue 02 Dec 2025 00:41:38 +0000 Manifest this update: Tue 02 Dec 2025 00:36:37 +0000 Manifest next update: Fri 05 Dec 2025 09:37:37 +0000 Files and hashes: 1: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=) 2: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=) 3: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: z4DUxnPaeA7XBTknRoydLfAjBsUDcFIsfHVu8bgDEpY=) 4: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f0:d7:23:f7:9a:08:1e:0b:c2:2d:0b:15:b5:94:83:24:5b:92:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Validity Not Before: Dec 2 00:36:37 2025 GMT Not After : Dec 5 09:37:37 2025 GMT Subject: CN=98D70E3EDB7B7CC2D4D31BCD9ADBF87EA25EC591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:a9:b8:51:52:05:cb:15:95:ad:05:1c:79: 1b:1d:c8:c3:88:80:7a:ae:89:9f:7d:4d:6a:3b:db: d0:ac:38:d2:fc:ea:2f:c0:ea:8d:ad:d0:7d:05:4c: 68:33:fa:d5:b2:4d:11:6f:fc:bc:2e:b6:aa:aa:8e: 25:2a:a0:7a:51:c1:33:c9:86:5d:26:e0:1a:fe:21: 74:d7:16:64:b9:bc:fe:a1:33:f3:19:47:51:62:49: 7a:fc:15:e9:dc:9b:a9:dd:fb:fe:ca:fa:fd:ad:bb: 68:2e:79:17:88:8c:80:07:0a:49:c4:81:b4:60:24: 54:ed:cc:3a:2e:ae:4b:2e:5d:73:90:56:e3:db:2a: 9d:95:a8:38:3e:50:bf:12:cd:c3:db:44:c8:d4:43: d6:52:4e:ce:33:f3:9d:db:65:ab:22:11:34:d9:ec: df:56:56:1c:fd:c6:6e:e6:16:18:de:68:12:cd:2f: 2d:57:92:a9:58:7d:9f:e5:53:97:ac:05:74:7c:88: bc:b8:63:41:ad:f8:4d:93:e7:54:50:5a:d0:96:59: ed:2f:87:b0:91:fc:91:b5:10:93:1c:57:2e:bd:89: 87:a7:2d:42:bc:4b:4d:6c:60:07:89:39:ac:d4:31: c8:2c:6d:f2:d1:ce:f3:87:ca:17:9f:66:1e:6d:cb: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D7:0E:3E:DB:7B:7C:C2:D4:D3:1B:CD:9A:DB:F8:7E:A2:5E:C5:91 X509v3 Authority Key Identifier: keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5b:46:bd:10:d7:8c:44:79:34:25:71:a1:ec:a5:36:1b:3f: 51:85:2e:23:41:c4:67:6f:80:62:6a:64:fc:eb:9c:c8:84:92: df:e8:8c:a5:89:92:33:cf:37:a6:bd:11:1e:e6:42:8d:93:11: 62:be:74:d3:6a:d2:fd:85:8a:b9:48:c6:ad:88:17:fd:bf:30: 1e:f8:33:46:00:d5:dc:35:8b:fb:59:fe:b7:a0:f9:5a:26:60: 73:d5:a0:30:0a:a7:55:ea:e6:36:9c:ec:9c:51:1f:49:6a:00: ab:bf:1a:86:f2:1a:fb:2d:b8:94:33:56:47:93:2e:be:65:dd: 84:e0:69:af:51:6d:ba:12:c7:1e:0b:d6:eb:e4:cf:82:64:7d: b0:97:93:d3:b6:9f:5b:3b:ae:68:ee:86:72:3d:fd:e8:a0:2b: 0f:a1:58:02:08:68:02:38:45:6c:4b:ea:bb:bc:3a:85:35:2c: 30:11:c7:48:29:21:e5:b7:33:53:1e:b1:5a:b7:13:c9:a9:3a: 41:98:00:86:4e:c7:a5:8f:c1:4d:07:78:bb:88:31:b5:e1:66: de:ab:f3:59:1e:a7:88:42:5c:74:4c:4e:94:b6:c6:08:51:e1: 50:be:1a:26:27:3d:6b:78:fc:6e:d0:d4:1d:33:d3:34:4a:53: b3:94:a9:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfDXI/eaCB4Lwi0LFbWUgyRbkh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx MEFFMjA2RjAeFw0yNTEyMDIwMDM2MzdaFw0yNTEyMDUwOTM3MzdaMDMxMTAvBgNV BAMTKDk4RDcwRTNFREI3QjdDQzJENEQzMUJDRDlBREJGODdFQTI1RUM1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHqm4UVIFyxWVrQUceRsdyMOI gHquiZ99TWo729CsONL86i/A6o2t0H0FTGgz+tWyTRFv/LwutqqqjiUqoHpRwTPJ hl0m4Br+IXTXFmS5vP6hM/MZR1FiSXr8Fencm6nd+/7K+v2tu2gueReIjIAHCknE gbRgJFTtzDourksuXXOQVuPbKp2VqDg+UL8SzcPbRMjUQ9ZSTs4z853bZasiETTZ 7N9WVhz9xm7mFhjeaBLNLy1XkqlYfZ/lU5esBXR8iLy4Y0Gt+E2T51RQWtCWWe0v h7CR/JG1EJMcVy69iYenLUK8S01sYAeJOazUMcgsbfLRzvOHyhefZh5tyyDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNcOPtt7fMLU0xvNmtv4fqJexZEwHwYDVR0j BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0 MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF MjA2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE4YWQ3YTYtYzkwNy00MzU5LWFi YTUtZDU3NDhiYTE2MTc2LzAvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkw RUMxMEFFMjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRbRr0Q14xEeTQlcaHspTYbP1GFLiNBxGdv gGJqZPzrnMiEkt/ojKWJkjPPN6a9ER7mQo2TEWK+dNNq0v2FirlIxq2IF/2/MB74 M0YA1dw1i/tZ/reg+VomYHPVoDAKp1Xq5jac7JxRH0lqAKu/GobyGvstuJQzVkeT Lr5l3YTgaa9RbboSxx4L1uvkz4JkfbCXk9O2n1s7rmjuhnI9/eigKw+hWAIIaAI4 RWxL6ru8OoU1LDARx0gpIeW3M1MesVq3E8mpOkGYAIZOx6WPwU0HeLuIMbXhZt6r 81kep4hCXHRMTpS2xghR4VC+GiYnPWt4/G7Q1B0z0zRKU7OUqbw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:14 2025 by rpki-client